Senior Technology and Security Auditor
HybridLeawood, Kansas, United States
Job Summary
Lead the planning, execution, and documentation of General IT Controls (GITC) audits across complex, global environments, partnering with business process owners and external auditors. Drive the development of IT, cybersecurity, and operational audit programs while serving as the subject matter expert for SOX GITCs. Evaluate control design and effectiveness for internally developed applications and partner with stakeholders to identify technology risks. Prepare high-quality audit documentation, including process narratives, risk matrices, and testing workpapers, and present clear findings with remediation strategies to senior leadership. Collaborate with process owners to validate remediation plans and leverage data analytics and AI to enhance testing coverage and evidence quality. Support the Internal Audit function by mentoring team members and assisting with recruitment.
Required Qualifications
- Bachelor's degree in Accounting, Finance, Information Systems, Computer Science, Cybersecurity, or a related field
- 2–6 years of experience in public accounting, internal audit, or IT audit, with a strong focus on SOX General IT Controls (GITCs), IT risk, and information security testing
- Experience evaluating and auditing a variety of technologies, security tools, IT infrastructure, and system development methodologies, including both commercial (vendor) software and internally developed applications
- Experience preparing comprehensive audit documentation, including process narratives, flowcharts, risk and control matrices (RCMs), control design assessments, and audit testing workpapers
- Experience partnering with internal and external auditors, business stakeholders, and IT teams throughout the audit lifecycle
- Proven ability to collaborate effectively in a fast-paced, cross-functional environment
- Strong quantitative, analytical, critical thinking, and problem-solving skills, with the ability to evaluate technology risks and identify practical solutions
- Demonstrated ability to identify root causes of control deficiencies, assess risk, apply professional skepticism, and develop practical, well-supported recommendations
- Excellent written, verbal, and presentation skills, with the ability to communicate effectively with both technical and non-technical audiences
- Strong organizational, project management, and time management skills, with the ability to manage multiple priorities and work independently in a hybrid or remote work environment
- Proficiency with Microsoft Office Suite, including Word, Excel, PowerPoint, and other business productivity tools
- The ability to travel domestically and internationally up to 20%
- Fluent in English
Desired Qualifications
- Experience evaluating and testing cybersecurity controls, including: Identity and Access Management (IAM), Privileged Access Management (PAM), Vulnerability Management, Security Monitoring and Incident Response, Data Protection Controls, Security Governance Frameworks
- Experience planning and executing SOX 404 General IT Controls (GITC) audit
- Experience assessing controls within cloud environments (Azure, AWS, or Google Cloud Platform), identity management platforms, cybersecurity programs, and DevOps environments
- Professional certifications such as CPA, CISA, CIA, ISO 27001 Lead Auditor, NIST Cybersecurity Framework (CSF), or related credentials, or a commitment to obtain certification after joining
- Experience within the financial services, fintech, or other highly regulated industries, including the design, implementation, or assessment of technology and security controls
- Experience partnering with external auditors to support SOX compliance, integrated audits, or other regulatory engagements
- Experience using data analytics, reporting, automation, and Artificial Intelligence (AI) tools to improve audit efficiency, testing, and reporting
- Public accounting and/or consulting experience
- Ability to communicate effectively in one or more additional languages is a plus
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.